Facebook, YouTube: Firm must stop scraping faces from sites